Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2704▼ 598 respecto a la semana anterior
Críticas / altas1288▼ 199 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior
79 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.7) | 0.56% | — | Netgear R6100 FirmwareNetgear R7500 FirmwareNetgear R7800 FirmwareNetgear Ex6200 Firmware+1 | 21/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by command injection. This affects R6100 before 1.0.1.14, R7500 before 1.0.0.110, R7500v2 before 1.0.3.16, R7800 before 1.0.2.32, EX6200v2 before 1.0.1.50, and D7800 before 1.0.1.22. | |
| Modificada | Media (6.7) | 0.64% | — | Netgear D8500 FirmwareNetgear R6400 FirmwareNetgear R8300 FirmwareNetgear R8500 Firmware+1 | 20/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D8500 through 1.0.3.28, R6400 through 1.0.1.22, R6400v2 through 1.0.2.18, R8300 through 1.0.2.94, R8500 through 1.0.2.94, and R6100 through 1.0.1.12. | |
| Modificada | Media (5.4) | 0.54% | — | Netgear D6100 FirmwareNetgear D7800 FirmwareNetgear Jnr1010 FirmwareNetgear Jwnr2010 Firmware+21 | 16/4/2020 | 17/6/2026 | Certain NETGEAR devices are affected by stored XSS. This affects D6100 before 1.0.0.58, D7800 before 1.0.1.34, JNR1010v2 before 1.1.0.50, JWNR2010v5 before 1.1.0.50, RBK50 before 2.3.5.30, RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, R6020 before 1.0.0.30, R6080 before 1.0.0.30, R6100 before 1.0.1.16, R6120 before… | |
| Analizada | Crítica (9.8) | 83% | ⚠ Explotación activa💥 Exploit | Netgear D6100 FirmwareNetgear D7000 FirmwareNetgear D7800 FirmwareNetgear Jnr1010v2 Firmware+24 | 30/1/2017 | 17/6/2026 | The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution. |